Cyso owns and runs a network spanning two locations in Amsterdam, interconnected using dark fibres with a total capacity of 160 Gb/s. Several 10 Gb/s connections to transit providers and AMS-IX and NL-ix ensure fast and highly redundant Internet connectivity. The network hosts a large number of tailor made platforms that Cyso built and maintains for its customers.
The Flowmon solution analyses all traffic going in and out of the Cyso network. Span ports mirror all traffic to Flowmon Probe, which sends the generated NetFlow/IPFIX to a Flowmon Virtual Collector. Besides the standard on-board analysis of the collector providing full IP traffic visibility, Cyso uses DDoS Defender and Flowmon ADS to make sure that malicious traffic is detected and acted upon fast and effectively.Flowmon Virtual Collector is running on VMware ESX, allowing for easy upgrades when more resources (CPU, memory, disk space) are needed. The Flowmon deployment is linked with the Dutch out of path mitigation initiative NaWas. The setup was easy to implement. Currently Cyso uses both Arbor Peakflow TMS and Flowmon + NaWas.